Skill UI

This advanced skill details dual-use security techniques for analyzing protected binaries, conducting malware analysis, and performing authorized penetration testing. It strictly mandates that users confirm explicit written authorization, adhere to defined scope, and ensure legal compliance (e.g., CFAA, DMCA). Use cases include CTF competitions, academic research, and internal security auditing, emphasizing defensive recommendations and evidence preservation.

This advanced skill details dual-use security techniques for analyzing protected binaries, conducting malware analysis, and performing authorized penetration testing. It strictly mandates that users confirm explicit written authorization, adhere to defined scope, and ensure legal compliance (e.g., CFAA, DMCA). Use cases include CTF competitions, academic research, and internal security auditing, emphasizing defensive recommendations and evidence preservation.

The API Design Reviewer provides comprehensive automated analysis of REST API designs using OpenAPI specifications. It performs linting for convention adherence, detects breaking changes between versions, and generates a design scorecard across consistency, security, and usability. Ideal for reviewing PRs, auditing API migrations, or establishing robust development standards.

Prepares codebases for Trail of Bits security reviews by setting goals, running static analysis, expanding test coverage, pruning dead code, documenting build scope/access, and generating flowcharts, user stories, glossaries, and other reviewer-ready artifacts.

Prepares codebases for Trail of Bits security reviews by setting goals, running static analysis, expanding test coverage, pruning dead code, documenting build scope/access, and generating flowcharts, user stories, glossaries, and other reviewer-ready artifacts.

A comprehensive security analysis tool for cryptocurrency wallets. It meticulously scans ERC20 token approvals, analyzes transaction patterns, and calculates a weighted security risk score (0-100). Use this skill to assess your wallet's overall security posture, identify risky approvals, and receive actionable recommendations to mitigate potential vulnerabilities.

A comprehensive security analysis tool for cryptocurrency wallets. It meticulously scans ERC20 token approvals, analyzes transaction patterns, and calculates a weighted security risk score (0-100). Use this skill to assess your wallet's overall security posture, identify risky approvals, and receive actionable recommendations to mitigate potential vulnerabilities.

A comprehensive guide for engineering teams to manage critical incidents related to Clerk authentication and SaaS platform outages. It covers full incident lifecycle procedures, including initial triage, emergency auth bypass implementation, key rotation, session recovery scripts, and post-incident root cause analysis. Use this when facing production authentication failures or security breaches.

An expert AI specialist that integrates advanced static analysis (e.g., CodeQL, SonarQube) with modern DevOps practices. It performs multi-layered code reviews, checking for security vulnerabilities, performance bottlenecks, architectural flaws, and adherence to best practices across various languages. Ideal for CI/CD pipelines and pull request validation.

This skill helps transform code reviews from simple gatekeeping into a powerful knowledge-sharing mechanism. It guides users through systematic analysis of code changes, focusing on correctness, security, performance, and maintainability. Use it when reviewing pull requests, establishing best practices, or mentoring developers to ensure high-quality, robust codebase development.

This skill functions as a dedicated dependency security expert, specializing in auditing project dependencies. It analyzes codebases for known security vulnerabilities, license compliance issues, outdated packages, and overall supply chain risks. It provides comprehensive, actionable remediation strategies and detailed risk reports to keep software supply chains secure and compliant.

Collects Docker build, compose, and runtime tips including multi-stage builds, isolated dependencies, compose healthchecks, .dockerignore, image analysis, and security anti-patterns to streamline container pipelines.